Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

actions tj-actions/branch-names Security Advisories

Critical

GSA_kwCzR0hTQS04djh3LXY4eGctNzlyZs4AA3lB

tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection
Ecosystems: actions
Packages: tj-actions/branch-names
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: 5 months ago

Statistics

Advisories: 18,254
Packages: 8,263
Repositories: 1
Ecosystems: 12

Filter by Severity

Moderate 7,882 High 6,319 Critical 2,791 Low 976

Filter by Ecosystem

maven 5,519 packagist 3,783 pypi 3,653 npm 3,530 go 1,887 nuget 1,390 rubygems 813 cargo 773 swift 31 hex 29 actions 16 pub 8

Filter by Package

rlespinasse/github-slug-action 2 tj-actions/verify-changed-files 1 afichet/openexr-viewer 1 tj-actions/branch-names 1 https://github.com/pytorch/pytorch/.github/actions/filter-test-configs 1 Azure/setup-kubectl 1 atlassian/gajira-create 1 check-spelling/check-spelling 1 hashicorp/vault-action 1 kartverket/github-workflows 1 actions/runner 1 gradle/gradle-build-action 1 embano1/wip 1 some-natalie/ghas-to-csv 1 tj-actions/changed-files 1

Filter by Repository

https://github.com/tj-actions/branch-names 1